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Privacy Notification 


Privacy Notification for individuals contacting Lundbeck’s Group DPO with 
privacy related inquiries or for the purpose of exercising their rights 





In connection with your inquiry to Lundbeck’s Group DPO, H. Lundbeck A/S will -- as data controller 
-- receive, process, use and disclose personal data about you as described in this Privacy 
Notification. 


This Privacy Notification also applies to the disclosure to and processing by other Lundbeck group 
companies, when such companies are involved in handling your request. A list of Lundbeck group 
companies is available here. H. Lundbeck A/S and each of the group companies are hereinafter 
referred to as “Lundbeck” or “we”. 


Lundbeck will process your personal data according to applicable legislation, including the EU 
General Data Protection Regulation (“GDPR’). 


What categories of personal data are we processing and for what purposes? 
We collect and process personal data about you as received when you provide us with your inquiry. 
Hence, the following types of personal data may be processed: 


- Contact information (name / initials, address, country of residence, e-mail address, phone 
number); 

- Your title; 

- Your job position; 

- Your gender; 

- Your age; 

- Documentation of your identity if prompted to present such documentation to enable a 
response to your inquiry; 

- Your inquiry and the response to your inquiry; 

- Other information (as provided by yourself in your inquiry). 


We process your personal data solely for the purposes of being able to provide you with an answer 


to your inquiry and to be able to enable you to exercise your rights according to applicable data 
protection legislation. 


How did we obtain your personal data? 
The personal data is collected: 
- Directly from you as part of your inquiry. 


When we collect personal data directly from you, you provide the personal data on a completely 
voluntary basis. You are not obliged to provide any information to Lundbeck. 
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What is the legal basis for our processing of your personal data? 
The legal bases for our collection and processing of your personal data as set out above are 
(depending on the circumstances and the content of your inquiry): 


- Lundbeck’s legitimate interest in being able to respond to your inquiry, cf. GDPR Article 
6(1)(f); 

- Incase you wish to exercise your rights under applicable data protection legislation, your 
information will be processed on the basis of GDPR Article 6(1)(c) due to the fact that the 
processing is necessary for Lundbeck to comply with our legal obligations. 


Will we disclose your personal data to third parties? 
We may disclose your personal data to the following recipients in order to be able to respond 
adequately to your inquiry: 


- The Lundbeck group company in your country of residence; 

- The Lundbeck group company responsible for activities in the region where your country 
of residence is located (provided that this group company is overall responsible for the 
activity in question; 

- Other Lundbeck group companies processing your personal data; 

- Third parties to whom your personal data have been transferred or otherwise disclosed, 
cf. GDPR Article 19, if relevant and if the inquiry relates to correction of personal data, the 
right to be forgotten, or the right to restriction. 


Disclosures of your personal data will be based on GDPR Article 6(1)(c) where necessary for 
Lundbeck to be able to comply with our legal obligations. 


Will we disclose your personal data to data processors? 

As part of handling your inquiry, Lundbeck’s IT service providers (acting as data processors) may 
-- technically -- gain access to your personal data. Said data processors will, however, only process 
your personal data on our behalf and on our instructions (subject to a compliant written data 
processor agreement). 


Will we transfer your personal data to recipients in countries outside the EU/EEA? 

If relevant in order to handle your request, your personal data may be transferred to a country 
outside of EU/EEA not providing the same level of protection as within the EU/EEA. Lundbeck will 
in this case ensure that such transfer(s) will be carried out in accordance with the applicable data 
protection legislation, including the GDPR. Such transfer may only take place if we can ensure an 
adequate level of data protection, e.g. by ensuring that the recipient enters into the EU Standard 
Contractual Clauses with Lundbeck. The Standard Contractual Clauses are available in several 
languages here. 


If your personal data gets transferred to other entities within the Lundbeck group of companies, the 
transfer will be based on the Lundbeck Intra-Group Data Protection Agreements or the Lundbeck 
Binding Corporate Rules (once implemented). More information regarding this can be obtained by 
contacting Lundbeck’s Group Data Protection Officer. 
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How long will we store your personal data? 

We store the personal data included in your inquiry for as long as necessary to fulfil the purposes 
above, however, for no longer than necessary required for Lundbeck to document compliance with 
applicable legislation in the countries handling this request. 


Your rights 

Subject to certain exceptions and restrictions set out in applicable legislation, you enjoy the right 
to request access to your personal data, to have your personal data rectified, to have your personal 
data deleted, and to have the processing thereof restricted. 


You also enjoy the right to object to the processing of your personal data where such processing 
is based on Lundbeck’s legitimate interest, cf. GDPR Article 6(1)(f). 


If you are not satisfied with Lundbeck’s handing of your request, you have the right to lodge a 
complaint with the competent supervisory authority, e.g. the Danish Data Protection Agency 
(Datatilsynet) or the national supervisory authority in your country. A list of all EU supervisory 
authorities is available here. 


Contact details of Lundbeck and Lundbeck’s Group Data Protection Officer 

Should you have any questions regarding the protection of your personal data, or if you wish to 
exercise your rights, please contact H. Lundbeck A/S or Lundbeck’s Group Data Protection Officer 
(DPO) by using the below contact details: 


H. Lundbeck A/S 
Ottiliavej 9 

2500 Valby 

Denmark 

Phone no.: +45 3630 1311 


Lundbeck’s Group Data Protection Officer (DPO): 
E-mail: dataprivacy@lundbeck.com 


